Full-text search across article titles and summaries. Refine with sector, year, content type, and reading-time filters.
The private key material of cryptographic keys can be leaked due to naturally occurring errors in SSH connections. Researchers were able to reconstruct private key material using lattice-based cryptography by comparing faulty signatures generated as part of the connection setup with successful signatures. The attack only affects RSA keys and can be mitigated by error correction in many common implementations of SSH.
Researchers have discovered a new exploit in AMD’s SEV protection. SEV is designed to protect against malicious hypervisors by encrypting VM data and protecting against its modification. This attack exploits the ability to modify cache lines to a previous state which can allow for manipulating authentication variables or return addresses.
This article talks about the new tools introduced by OpenAI on DevDay and how they can be used to exfiltrate data and files, as well as perform backdoor insertion using the Code Interpreter. Attackers may be able to access personal files and manipulate code through malicious prompts on websites, posing a threat to large populations.
Developers have been targeted by malicious Python packages disguised as legitimate obfuscation tools, with the most recent package being "pyobfgood". The package has a destructive payload, "BlazeStealer", that retrieves an additional malicious script from an external source, enabling a Discord bot that gives attackers complete control over the victim's computer.
This post provides an overview of Terraform and some common security best practices. It covers auditing terraform manifest files (using scanning tools), managing credentials and secrets, and creating and using modules.
AWS has launched a new feature that allows for blocking of all or new public sharing of EBS snapshots. EBS snapshots could be heavily sensitive as they contain the full content of EBS disks. The setting must be applied per region and per account.
A project for syncing users from AWS IAM Identity Center to an Amazon RDS cluster. The project creates an Eventbridge rule that watches for new users in IAM Identity Center that belong to a configured group and then runs a Lambda function to create a new user in the RDS cluster. The user will then be able to login to the database with their IAM credentials.
CVE Half Day Watcher is a tool for viewing vulnerabilities in the public domain where the fix hasn't been released yet. This tool intends to highlight the risk of early exposure of Common Vulnerabilities and Exposures (CVEs) in the public domain.
The Australian Cyber Security Centre (ACSC) and the Cybersecurity and Infrastructure Security Agency (CISA) have jointly launched Business Continuity in a Box, a tool designed to help organizations quickly and securely set up critical business functions during or after a cyber attack.
This article talks about the various approaches to Post-Quantum Cryptography (PQC). PQC algorithms have been specially designed to ensure information is kept safe in the future. There are currently four main types of PQC algorithms: lattice-based, code-based, multivariate polynomial, and hash-based. The article talks about how lattice-based cryptography is straightforward but adds complexity.
Intel has patched CVE-2023-23583, also called a 'Redundant Prefix Issue' or 'Reptar' by teams within Google that also independently discovered it. CVE-2023-23583 can be exploited by attackers to escalate privileges, gain access to sensitive information, or trigger a denial of service state.
The Malaysian police managed to dismantle the BulletProftLink Phishing-as-a-service company in collaboration with the FBI and the Australian Federal Police. As of April 2023, BulletProftLink was estimated to have 8,138 subscribers with 327 phishing page templates.
This cheat sheet provides essential commands for use in CTFs, THM boxes, and cybersecurity.
Malicious actors exploited Ethereum's Create2 function to bypass wallet security alerts and steal $60 million worth of cryptocurrency from 99,000 people in six months.
Baidu Global is set to utilize Microsoft Advertising’s Chat Ads API to offer users of its mobile keyboard, Baidu Global Keyboard, more relevant sponsored content suggestions. The partnership will begin in early 2024 in the US, Canada, UK, and Australia. Advertisers can take advantage of this by choosing “The entire Microsoft Advertising Network” for all ad group settings.
The Cisco AI Readiness Index, based on responses from over 8,000 business leaders, reveals that only 14% of respondents are prepared to “deploy some kind of AI strategy” in 2024. The rest either lack the infrastructure, policies, talent, or data to do so. There is currently a large gap between ambitions and operational realities in many companies.
A health & wellness brand wanted to increase conversions and revenue from its new subscriber email flow. It extended the welcome flow from 3 emails to 9 by adding in past newsletters with the highest CTR and last-click revenue. In the 3 months following, the welcome email flow generated an average of $2.53 per new subscriber, an increase of 181%.
Avoid writing cold emails with phrases like 'just touching base', 'pick your brain', and 'quick question'. Instead, focus on learning about your ICP in detail to tailor the content. Then, deliver it in 4-5 short sentences containing an observation, the problem, credibility, solution, and a CTA.
AI tools can simplify social media video creation. Klap and Munch each create multiple short-form videos with captions from a single YouTube video. Vidiofy generates a video from an article or blog URL, including topic highlights, image backgrounds and music, and a voiceover. Fliki generates short videos from any text, tweet, or prompt.
This post shares how to automate writing SEO title tags and meta descriptions using a Chrome plugin called SERP Snippet Extractor, Google Sheets, and ChatGPT. The links to the tools are provided in the post’s comment section.
A list of Marketing conferences taking place in 2024 in the US. It provides the date, location, and a brief summary of the topics covered. Events include B2B Marketing Exchange, Ignite USA, and Digital Summit.
Many companies treat inbound and outbound leads the same, which is a mistake. Since inbound leads already know your brand, skip the typical introduction. Focus your first call/email on getting to know them. Then, qualify them in or out of your sales pipeline using a scoring system, framework, or a set of qualification questions. This process evaluates which prospects are most interesting and closest to closing.
If done wrong, discounts can negatively impact a business and brand, diluting its margins and giving the impression that your products are not worth their regular price. This article covers the importance of leveraging data to develop the right strategy and shares how to segment customer data to tailor discounts and promote new arrival products.
75% of users form their perception of a company’s credibility based on the design of its website or app. UX microinteractions are subtle system responses, and users will undoubtedly notice if they’re not present.
This study ranks the top 10 digital advertisers by industry based on estimated ad spend. Industries covered include retail, finance, home & decor, food delivery, and media.
TikTok announced a new feature called "Add to Music App" that allows users to save songs from the videos directly on music apps.
Sponsored
for developers like you: front-end, back-end, product - you name it. And here’s the best part: You don’t need to apply for jobs. Companies approach you with salary details [5] upfront 🤯
This article explores four kinds of optimization: using better algorithms, better data structures, lower-level systems, or accepting less precise solutions. Each solution involves trade-offs and requires a deep understanding of the specific context and performance requirements. Before making assumptions about performance bottlenecks, it’s important to rigorously profile an application and use the right optimizations in the right context.
This article explains the two ways of working with forms in Angular: Reactive and Template-driven forms. Reactive forms provide direct access to the underlying form object model and are suitable for applications heavily reliant on forms, offering scalability, reusability, and testability. Template-driven forms use directives within the template to create and manipulate the form’s object model and are simpler to use for basic forms. The article provides a detailed guide on creating a profile form component to demonstrate how each type of form is implemented.
Software architects and senior engineers can save you tons of time and prevent crucial mistakes from happening. The key to a productive relationship with them includes doing your part well, like promptly addressing their requests, proactively consulting them, and appreciating their contributions. It’s important to clearly define the help needed, push for their support, and avoid offloading trivial tasks.
This author experienced an existential crisis over the past several months about their work in open source AI due to the industry's rapid evolution and toxic backlash. After taking a break, they returned to find users questioning the abandonment of their project, which caused panic and frustration. They reflect on the unrealistic expectations in open source software development, highlighting the challenges of maintaining projects and dealing with user demands.
Sponsored
Elevate your business with a robust data file importer [10] embedded right into your application. Collect customer data—whether it's CSV, XLSX, or more—via embedded GUI, API, webhooks, or workflows. Leverage the power of AI to efficiently transform and match fields [10]to meet your specific format. Trusted by industry leaders like Square, ClickUp, Sage, and countless others. Get started today and revolutionize your data import solution,
GPT Crawler crawls websites that you specify and creates a summation of the information on the sites, all packed into a file. This file can then be used in tandem with OpenAI to create a custom assistant or a custom GPT.
SirixDB is a database system designed for embedding, focusing on temporal and evolutionary data management. It adopts an append-only strategy for storing immutable versions, ensuring the complete history of each resource is preserved. Each commit in SirixDB creates a space-efficient snapshot via structural sharing. The system is built on a log-structured model that avoids data overwriting and implements an innovative versioning technique at the page level.
The future of cloud data services may focus on serverless, multi-tenant data architectures. This article examines different systems like OLTP databases, OLAP, cloud data warehouses, and event streaming systems. The author notes the growth in serverless multi-tenant (MT) systems, such as Google's BigQuery and Amazon's DynamoDB, and explores emerging ones like Neon and CockroachDB. There are challenges unique to serverless MT systems, such as latency, consistency, heat management, and the importance of high resource utilization.
A team of 3 developers at Monday.com upgraded their Elasticsearch cluster and improved indexing strategies in just 3 weeks, resulting in a 3.5x average performance boost and a 40x boost in peak times for complex queries. This post highlights in detail how the migration process was performed, breaking it into 5 steps: cluster and index creations, data integration and performance checks, and throttling and optimization. It also comes with 6 takeaways that can be helpful for any general data migration process.
A collection of best practices for building successful, empathic, and user-friendly CLI tools using Node, plus an appendix of popular CLI frameworks.
A curriculum for learning machine learning put together by Microsoft Engineering.
A developer shares his lessons from creating a programming language called Inko.
The GitHub CLI is an amazing tool for anyone involved in open source. This article shows you how to use it to its fullest potential.
Google pays Apple 36% of its search advertising revenue from Safari to keep its search engine set as the default. Google and Apple had objected to making this information public, but a witness from Google let it slip during their testimony. It is unclear how much money this amounts to, but it is estimated that Apple likely gets paid tens of billions of dollars out of the deal. Google pays a total of $26 billion for its default contracts.
Nvidia has revealed the HGX H200 Tensor Core GPU, a follow-up of the H100GPU released last year. The H200 utilizes the Hopper architecture to accelerate AI applications. It could lead to far more powerful AI models and faster response times for existing ones. The lack of computing power has been a major bottleneck for AI progress. Amazon Web Services, Google Cloud, Microsoft Azure, and Oracle Cloud Infrastructure will be the first cloud service providers to deploy H200-based instances starting next year. The H200 will be generally available starting in Q2 2024.
Joby Aviation and Volocopter performed brief demonstration flights of their electric aircraft in New York City over the weekend. New York City Mayor Eric Adams wants to electrify two of the three heliports located in Manhattan. The city aims to reduce emissions by 80% from a 2005 baseline by 2025. Joby is aiming to initially roll out a commercial service in New York and Los Angeles as part of a city-to-airport service deal with Delta Airlines.
CAR T cell therapy is a powerful type of immunotherapy that has begun to revolutionize cancer treatment. It involves engineering a patient's T cells so they recognize and attack cancer cells. New research has shown that disrupting a single gene in CAR T cells can make them more potent and able to fight tumors longer. The approach improved the therapy's effectiveness against multiple cancers in mice.
Sponsored
If you've tried to build automated test coverage in-house, you know it takes years to scale. Try QA Wolf [9] instead - they get web apps to 80% test coverage in just 4 months. They will create and maintain your test suite in open-source Playwright (no vendor lock-in, you own the code), and provide unlimited parallel test runs on their infrastructure. The best part: QA Wolf saves you money. QA Wolf has multiple case studies of customers saving at least $200k/year in QA engineering and
This repository is an effort to create a similar experience to OpenAI's GPTs. It allows developers to configure over 60 LLMs, prompts, over 100 tools, vector databases, retrieval algorithms, and chat history databases. The project uses LangChain, LangServe, and LangSmith.